Displaying present location in the site.

Introducing the Function of EXPRESSCLUSTER: Function to Display Operation Logs of the Cluster WebUI

EXPRESSCLUSTER Official Blog

June 22nd, 2023

Machine translation is used partially for this article. See the Japanese version for the original article.

Introduction

We have released EXPRESSCLUSTER X 5.1, the latest version of EXPRESSCLUSTER X, on April 27th, 2023.
In EXPRESSCLUSTER X 5.1, we have enhanced many functions such as expanded functionality for the cloud, making it easier to build and operate, security enhancements, and support for new OS and platforms. For other enhancements of EXPRESSCLUSTER X 5.1, please refer to popupEXPRESSCLUSTER X 5.1 New Enhancement document.

One of the security enhancements in EXPRESSCLUSTER X 5.1 is the function to display operation logs of the Cluster WebUI.
As a result, it is now possible to easily check when, by whom, from where, and what operation was performed on the Cluster WebUI.
This time, we will introduce how to check the operation logs of the Cluster WebUI with display examples.

Contents

1. What is the Function to Display Operation Logs of the Cluster WebUI?

The operation logs of the Cluster WebUI records when, by whom, from where, and what operation was performed on the Cluster WebUI. This makes it easy to find past operations or evidence of unauthorized operations.
The operation logs of the Cluster WebUI can be recorded in EXPRESSCLUSTER X 4.3 and later, but in the previous version, it was necessary to check the log files in CSV format directly, so there were points where they were not easy to view and readable.
On the other hand, in EXPRESSCLUSTER X 5.1, it is now possible to check the operation logs of the Cluster WebUI from the [Operation logs] tab on the Cluster WebUI, making it easier to use for daily checking and analysis.

The operation logs of the Cluster WebUI is stored on the server where the Cluster WebUI is accessed. Therefore, if you are accessing to the Cluster WebUI using the management IP address (floating IP address used to access to the Cluster WebUI), the operation logs is stored on the server where the management IP address is active.

2. How to Read the [Operation logs] Tab

As mentioned above, in EXPRESSCLUSTER X 5.1, we can check the operation logs from the [Operation logs] tab of the Cluster WebUI.
The following items can be checked on the [Operation logs] tab.

Display items of the operation log
Date and time Time when the operation information is outputted.
Operation Name of the executed operation in on the Cluster WebUI.
IP address IP address of a machine that operated the Cluster WebUI.
Username Name of a user who executed the operation.
(* When a user logged in to the Cluster WebUI by using the OS authentication method, the user name is output.)
Status HTTP status code.
Error code Return value of the executed operation. (0: Normal, Not 0: Abnormal)
Processing time Time taken for executing the operation (in milliseconds).
Target Server name, group name, resource name, etc. to be operated.

In [Filter settings], we can filter by any "Date and time", "Operation", "IP address ", "Username", "Status", "Error code", and "Target".

In [Customize table], we can customize the display items of the operation logs.

3. Display Examples of the Operation Logs

We introduce display examples of the operation logs. The following image is display example of the operation logs when the following procedure is performed on the Cluster WebUI. The password for connecting to the Cluster WebUI is set in advance using the cluster password method.

  • 1. Log in to the Cluster WebUI.
  • 2. Go to the [Mirror disks] tab and display the details of the mirror disk.
  • 3. Execute [Stop cluster].
  • 4. Switch to [Config mode] and change and apply the cluster configuration information.
  • 5. Switch to [Operation mode] and execute [Start cluster].

In addition, the following is the display examples of the operation logs when a specific operation is performed, narrowing down to each operation.

Example 1) Start/Stop the cluster

  • Start cluster

  • Stop cluster

Example 2) Move the failover group

  • Move group

Example 3) Full copy/Difference copy of the mirror disk

  • Full copy

  • Difference copy

Example 4) Shutdown/Reboot the cluster servers

  • Shutdown cluster

  • Reboot cluster

Example 5) Apply the cluster configuration information

  • Apply the Configuration File

Example 6) Success/Failure to log in to the Cluster WebUI (Cluster password method)

  • Login (* The red text is not actually displayed.)

Example 7) Success/Failure to log in to the Cluster WebUI (OS authentication method)

  • Login User (* The red text is not actually displayed.)

Conclusion

This time, we introduced function to display operation logs of the Cluster WebUI, which is one of the functions of EXPRESSCLUSTER X 5.1.
With the addition of this function, it is now possible to easily check when, by whom, from where, and what operation was performed on the Cluster WebUI.

If you consider introducing the configuration described in this article, you can perform a validation with the popuptrial module of EXPRESSCLUSTER. Please do not hesitate to contact us if you have any questions.